build ASM/WAF policies, tune signatures, stop bots/DoS, cut false positives, analyze logs, and handle incidents fast